Why Adult Businesses Are Classified as High Risk Merchants
Chargebacks, Fraud, and the Payment Infrastructure Problem, how Visa and Mastercard's risk rules decide who gets paid in the creator economy
In December 2020, the biggest adult website on the planet lost the ability to accept credit cards in less than a week. On December 4, the New York Times published Nicholas Kristof's column "The Children of Pornhub," documenting how the site's unmoderated upload system had allowed videos of abuse to circulate. Within days, Mastercard and Visa announced they were suspending card payments on Pornhub, and Mastercard never came back. The site's owner, then called MindGeek, responded by deleting every video uploaded by not verified users, which meant wiping out the majority of the library, millions of clips, in a single sweep. Years later, Pornhub still cannot take a Visa or Mastercard payment directly. It leans on cryptocurrency and bank transfers instead. Whatever you think of the company or its content, the episode demonstrated something that matters far beyond one website: two private companies, Visa and Mastercard, can effectively switch off the revenue of any online business, and in the adult industry they have built an entire rulebook around when and how they will do it. That rulebook is the reason adult businesses are labeled high-risk merchants, and it shapes the economics of every creator platform that touches the category, including the live streaming services this site covers.
High-risk merchant status sounds like a judgment about legality. It is not. Adult content produced and sold between consenting adults is legal in most Western markets, yet it sits in the same risk bucket as online gambling, cryptocurrency exchanges, nutraceuticals, CBD sellers, and debt collection agencies. The classification is made by acquiring banks, the institutions that actually process card transactions for merchants, under standards set by the card networks. What earns a business the label is a combination of three things: chargeback rates well above the retail norm, fraud exposure well above the retail norm, and what the networks call brand risk, meaning the reputational discomfort of having their logo associated with the transaction. Adult checks all three boxes in the eyes of the industry, and once the label attaches, everything about the financial relationship changes, from the fees charged to the reserves held to the amount of content monitoring a platform must perform.
The chargeback is the mechanism at the center of it all. A chargeback happens when a cardholder disputes a transaction and the bank forcibly reverses it, pulling the money back from the merchant. The system was designed as consumer protection against stolen cards and dishonest sellers, and in most of retail it works quietly in the background. In adult, it behaves differently. Industry data puts typical chargeback rates for adult content merchants between 0.5 and 1.5 percent of transactions, and the drivers are unusual. A large share are what the payments world calls friendly fraud, meaning the cardholder made the purchase and disputes it anyway. Buyer's remorse is one cause. A spouse spotting a statement is another. Ironically, the discreet billing descriptors that platforms use to protect customer privacy, generic company names instead of anything recognizable, generate their own wave of confusion disputes when a customer fails to connect the name on the statement to a subscription they bought. Subscription billing adds its own friction: a customer who forgets a recurring charge, or who meant to cancel and did not, often calls the bank instead of the merchant, because the bank feels like the safer and less embarrassing conversation. Across all of e-commerce, buyer's remorse now drives well over half of disputes, and in adult the emotional stakes around discovery make the problem worse. Every chargeback costs the merchant a penalty fee, typically $20 to $100 in high-risk categories, on top of the lost sale, and the ratio of chargebacks to total transactions is watched constantly by the card networks. Cross the line they set and the penalties escalate from fines to mandated remediation plans to termination.
Then there is actual fraud, which is a separate problem with separate math. Adult sites attract stolen credit cards the way bright lights attract moths, because a fraudster testing whether a card number works prefers a merchant where a small purchase will not trigger a phone call from the bank. Card testing attacks, where bots run thousands of stolen numbers through a checkout page, are common enough that Visa now tracks them as their own metric. Affiliate marketers in the adult space have historically gamed signup commissions with fake accounts funded by stolen cards. And there are bust-out schemes, where a merchant account is opened, run hard for a few weeks, and abandoned before the chargebacks land. The reason processors care so much is structural: when a merchant disappears or goes broke, the acquiring bank is on the hook for the chargebacks and refunds left behind. That contingent liability is why underwriting an adult merchant feels more like vetting a loan applicant than opening a shop account, and why so few banks bother. Legal exposure has joined the list more recently. In 2022, a federal judge in California allowed a lawsuit brought by Serena Fleites, whose abuse was filmed and uploaded to Pornhub as a minor, to proceed against Visa, finding it plausible that the network had knowingly provided the tool used to complete a crime. Visa briefly suspended card acceptance for MindGeek's advertising arm while it assessed the fallout. The case settled, but the lesson for every card executive watching was clear: processing these payments no longer carried just financial and reputational risk, it carried the possibility of a courtroom.
The Card Networks Rewrite the Rules
The decisive shift came from Mastercard. In April 2020 the network announced new requirements for adult content merchants, which took effect on October 15, 2021, and they went well beyond anything the industry had seen. Under the rules, every person appearing in content must have their identity and age verified with government issued ID. Written consent must be collected and kept on file from everyone depicted. Platforms must sign written agreements with every content provider prohibiting illegal activity. All uploaded content must be reviewed before publication, not after. Live streaming gets special attention: platforms must be able to monitor streams in real time and remove violating content as it happens, a requirement that lands directly on the cam and live streaming business model. Complaints about nonconsensual content must be resolved within seven business days, there must be a clear process for people to demand removal of content depicting them, and acquirers must file monthly reports to Mastercard detailing complaints, flagged content, and how each case was handled. Mastercard also reserved the right to inspect any content behind a paywall on a site using its network. Read that list again and notice what it describes: the card network made itself a content regulator, and it deputized banks and processors as enforcement staff.
The OnlyFans episode of August 2021 showed what this power looks like in practice. The company announced it would ban sexually explicit content starting October 1, stating plainly that the change was necessary to comply with the requirements of its banking partners and payment processors. The backlash from creators was immediate and ferocious, and within a week OnlyFans reversed course, saying it had secured assurances from those same banking partners that it could support all genres of creators. At the time the platform reported 130 million users and 2 million creators who had collectively earned $5 billion. The whiplash week made one thing visible to the general public for the first time: the terms under which millions of people earn their living were being set not by the platform, not by any regulator, and not by any legislature, but by risk committees at financial institutions whose names the creators had never heard. The policy was written, announced, and suspended without a single public document explaining what the banks had actually demanded.
The screws have kept tightening since. Visa consolidated its fraud and dispute monitoring into a single program called VAMP, the Visa Acquirer Monitoring Program, which began rolling out in 2025. VAMP merged fraud reports and chargebacks into one ratio, which in practice counts many transactions twice, and it set the merchant threshold for "excessive" status at 2.2 percent initially, dropping to 1.5 percent in April 2026 for the US, Canada, Europe, and Asia Pacific. The sharper edge is aimed at the banks. An acquirer's entire merchant portfolio must stay below 0.7 percent, with a warning band starting at 0.5 percent, and fines attach per transaction when those lines are crossed. The consequence is predictable: a bank that might once have balanced a few adult merchants against a large book of boring low-risk ones now has a mathematical reason to cut the adult merchants loose. Payments consultants describe a quiet consolidation, with the pool of acquirers willing to touch the category shrinking toward a handful of specialists. Merchants who breach the rules repeatedly can end up on the MATCH list, an industry database of terminated merchants that functions as a blacklist, making it nearly impossible to open a card processing account anywhere else. There is no formal appeal process for being placed on it.
What the People Inside the System Say
Few people understand this machinery better than Cathy Beardsley, the CEO of Segpay, one of the handful of processors, alongside CCBill and Epoch, that specialize in adult and have done so for decades. Beardsley has described how banks and card companies run automated crawlers against their clients' websites every month, scanning for flagged words and terms that merchants then have to clean up to keep their accounts in good standing. She calls financial discrimination the biggest issue adult businesses face, and she has taken that message to Congress as treasurer of the Free Speech Coalition, the industry's trade association. Mike Stabile, the FSC's director of public affairs, has confirmed a detail that startles outsiders: adult sites routinely hand account passwords to their banks so that bank staff can log in and review the content for themselves, flagging specific words and scenes that must be removed as a condition of keeping the account. When the FSC surveyed the industry for its 2023 report Financial Discrimination and the Adult Industry, it found that 62 percent of people earning money in adult had lost a bank account or a financial tool like PayPal, Venmo, or Cash App because of their source of income, and nearly half of adult businesses named financial discrimination as the single biggest problem they face. Creators of color were twice as likely as others to report a bank closure in the previous year. A bipartisan Fair Access to Banking Act has been introduced in the Senate to restrict banks and card networks from refusing service to businesses that comply with the law, though it has yet to pass.
The cost structure tells the same story in numbers. A mainstream online merchant pays roughly 1.5 to 3 percent per transaction. An adult merchant typically pays 5 to 10 percent through a specialist processor, plus a flat per transaction fee. On top of that come the network registration fees: Visa charges $950 a year under what is now called the Visa Integrity Risk Program, and Mastercard doubled its specialty merchant registration fee from $500 to $1,000 a year in May 2026, while adding a $50,000 annual license fee for every acquirer that onboards high-risk merchants and, from June 2026, new per transaction charges of two cents plus 0.10 percent of volume on every specialty merchant sale. Processors commonly hold a rolling reserve, keeping 5 to 20 percent of a merchant's monthly volume locked up for 90 to 180 days as a chargeback cushion, which means a platform's cash flow is structurally slower than its revenue. Setup fees, PCI compliance fees, monthly account fees, and early termination penalties of several hundred dollars round out the stack. None of these costs vanish. They flow downhill into the take rates and payout terms that platforms offer creators, which is one reason payout delays and high platform commissions are persistent features of the creator economy in this category.
The knock-on effects reach platforms and creators who never think of themselves as part of the adult industry at all. Compliance with the Mastercard rules requires identity verification vendors, content review tooling, moderation staff, and legal review, a fixed cost base that favors large platforms and squeezes small ones out of the market. Some mainstream creator platforms have responded by banning adult content outright rather than building the compliance apparatus, which pushes the same performers toward fewer, larger, more specialized sites. Mainstream payment apps periodically sweep through and close the personal accounts of performers who used them for tips, which is why so many creators maintain redundant accounts and why a niche of crypto based platforms, Spankchain being the best known, exists at all. Researchers who study the industry as labor, sociologists like Angela Jones, author of Camming, and Heather Berg, author of Porn Work, have documented how these financial frictions function as a workplace issue: delayed payouts, frozen funds, and sudden account closures are the cam worker's equivalent of wage theft, and they fall hardest on performers with the fewest banking alternatives.
There is a reasonable version of the card networks' position, and it deserves a fair hearing. Chargebacks and fraud genuinely are higher in this category, the liability that lands on acquirers is real, and the 2021 Mastercard rules addressed genuine horrors: nonconsensual content and underage material had slipped through platforms that claimed they could not possibly review everything, and after the rules arrived it turned out they could. The adult industry itself, through the FSC, will tell you that legitimate operators support age verification and consent documentation, because they were doing versions of it for years under US record keeping law. The problem is not that risk management exists. The problem is that a duopoly handling the overwhelming majority of card transactions on earth has become the de facto regulator of a legal industry, with standards applied through opaque bank reviews, keyword crawlers, and password inspections, with no published reasoning, no appeal, and no accountability when a legal business or an individual performer is cut off by mistake. Banks are private companies and can choose their customers. But when two companies function as essential public infrastructure for getting paid online, their risk departments are making social policy, and the people most affected, the creators whose income depends on the rails, have no seat at the table and often no idea a decision about them was ever made.
The payment pipeline is the least visible part of the creator economy and the most load bearing. Platforms can rebuild features, renegotiate contracts, and rebrand overnight. None of it matters if the money cannot move. In the adult industry, the money moves through a narrowing channel of specialist processors, under rules written in Purchase, New York and San Francisco, at fees that would bankrupt a normal retailer, with a blacklist at the end of the line for anyone who slips. Every creator platform, adult or otherwise, operates one phone call away from the same machinery.